-
Content Count
11403 -
Joined
... -
Last visited
... -
Days Won
1985
Everything posted by Staff
-
Hello! Yes, we have two servers in California, both with a 1 Gbit/s line. You can check anytime the available servers on the real time servers monitor, which will provide you with several information (click on "Status" in the upper menu). Direct link: https://airvpn.org/status Kind regards
-
Hello! We have currently prepared pre-packaged solutions for Linux and Windows. A guide for Mac OS X and OpenVPN will be ready very soon (stunnel installation and direct OpenVPN usage will be necessary). If you live in a country where OpenVPN connections are disrupted (in any other case, OpenVPN over SSL is NOT recommended, essentially for performance hit - in any case in which a direct OpenVPN connection is possible, OpenVPN over SSL does not make much sense but in very exceptional circumstances) please contact us and we'll provide you with the draft guide. Kind regards
-
Hello! The test is fully successful. That site will always claim nonsense if you are not connected to their service or TOR. Your post might be edited (no advertisements allowed in this forum). Kind regards
-
Hello! The logs are fine. The first thing you can try is a connection to a different port: maybe Verizon performs port shaping on outbound port 443 UDP. Please test connections to 53 UDP and 80 TCP to make a performance comparison test. Kind regards
-
Hello! In order to let us provide a preliminary overview, can you please send us your client connection logs? Kind regards
-
Hello! Yes, if the tun/tap interface does not come up (in which case, you are probably running Windows, can you confirm?) OpenVPN will not be able to modify your system routing table and therefore even if a connection to a VPN server is established nothing will get tunneled. Please send us your complete connection logs in order to determine if it's your case. Kind regards
-
HOW TO FORWARD PORTS TO YOUR DEVICES WITH IPTABLES You need to create a basic DNAT on your router. Remember that the router GUI usually forwards ports from the WAN to LAN. When connected to the VPN you must forward ports from TUN interface to the final destination. Therefore, it is important that you do not forward ports through the GUI of the router. Assuming that: destIP is the IP address of the destination device port is the port you wish to forward to that device tun1 is the tun interface of your router (please check! on some routers it can be tun0, on Tomato it can be tun11) you need to forward both TCP and UDP packets you need to add the following rules. Please note that the following rules do NOT replace your already existing rules, you just have to add them. iptables -I FORWARD -i tun1 -p udp -d destIP --dport port -j ACCEPT iptables -I FORWARD -i tun1 -p tcp -d destIP --dport port -j ACCEPT iptables -t nat -I PREROUTING -i tun1 -p tcp --dport port -j DNAT --to-destination destIP iptables -t nat -I PREROUTING -i tun1 -p udp --dport port -j DNAT --to-destination destIP Note: if your router firmware iptables supports the multiport module you can use --match option to make your rules set more compact. Please see here, thanks to Mikeyy https://airvpn.org/topic/14991-asuswrt-merlin-multiple-ports/?do=findComment&comment=31221 Kind regards
-
Hello! ISSUE (CRITICAL) Just 4 days ago Tunnelblick 3.3beta44 was released. We can now surely recommend the upgrade to 3.3beta44 (or beta46) to all Mac OS X 10.8.x (Mountain Lion) users, however it is now clear that there's a critical problem with this version of Tunnelblick and OpenVPN 2.2.1 which prevents connections to our service. SOLUTION Switch to OpenVPN 2.3.x from inside Tunnelblick menu. Kind regards
-
[SOLVED] asus rt-ac66u router and vpn
Staff replied to methlon's topic in Troubleshooting and Problems
Hello! Please disregard the previous message, it pertains to another Asus model, as you correctly wrote to us in private. Apparently there are no known issues with your router and the appropriate DD-WRT Mega build with OpenVPN, but please be aware that we have not tested it and we have no direct reports for your router model. Kind regards -
[SOLVED] asus rt-ac66u router and vpn
Staff replied to methlon's topic in Troubleshooting and Problems
Hello! Please read here very carefully. DD-WRT on this router still features some fatal risks (router bricking!), so you might like to evaluate the different options that are cited in the article: http://www.dd-wrt.com/wiki/index.php/Asus_RT-N66U Kind regards AirVPN Support Team -
Hello! This is a bug which occurs under specific circumstances (when you switch server and you access your port forwarding panel within 2 minutes). We are working to fix the bug, it will take time, in the meantime please do not access the port forwarding panel after you have switched server, just wait approximately 120 seconds. Kind regards
-
d/l'd the access without client and didn't have a user.key
Staff replied to mr.esnyder71's topic in Eddie - AirVPN Client
Hello! Please see the following guide (executive summary: you need to click "Advanced options" and select "Separate keys/certs..."): https://airvpn.org/topic/9149-how-to-use-advanced-airvpn-services-and-features/ Kind regards AirVPN Support Team -
Pre-configured DD-WRT Routers with OpenVPN - Worth the investment?
Staff replied to cessn@47's topic in General & Suggestions
Hello! No problems at all, please link them to https://airvpn.org/ddwrt and use the configuration generator to provide them with the appropriate files. Please remember that those who are given your user.key can connect to any Air VPN server with your account. Behind a router you can connect as many devices as you wish, our system will always see just one account and a single connection. Kind regards -
iptables on router setup question for airvpn
Staff replied to mdove's topic in General & Suggestions
Hello! Just as a preliminary check, there's a very important difference between our service and (as far as we know) all the others: the entry-IP and the exit-IP of our servers are not the same. This is very important for security reasons and fix the notorious vulnerability to some types of correlation attacks which affect most of VPN services with shared IP addresses. Therefore, to begin with, check that the Air server IP you specify in the FORWARD chain is the entry-IP, not the exit-IP. You can determine the entry-IP of each server by looking at the line "remote" of the configuration file (generated by the Config Generator) or ask us directly (not in the forum, entry-IP addresses normally are not published here). Kind regards -
Hello! There's no way yo make such a correlation, unless with correlation attacks (see our FAQ) from an adversary with the ability to monitor your line. These attacks can be successful only if your system is badly configured (for example if it runs services listening to every interface and the remotely forwarded ports are open even locally). Is that machine secured so that when the VPN connection is not "on", the traffic is blocked? Kind regards
-
Hello! We regret to inform you that due to a "very large DDoS" between 1.45 and 2.30 AM CEST against part of the Leaseweb infrastructure in the Netherlands you might have experienced packet loss, high latency and possible disconnections on our Netherlands servers Leporis, Lyra and Castor. Leaseweb took the necessary countermeasures and all the problems have been solved at 2.30 AM CET+1. http://leasewebnoc.com/en/networkstatus/leaseweb-nl-network-issue-1 Kind regards
-
Hello! We have already answered. If there's any misunderstanding please do not hesitate to contact us. Kind regards
-
Hello! Between the brackets (wiping out the > and AirVPN_CH-Virginis_SSH-22.bat Kind regards
-
Hello! What is the TTL of your DNS records? Kind regards
-
ANSWERED My real name appears in those who are logged in
Staff replied to Droopy's topic in General & Suggestions
Hello! Why did you insert your real name in the registration process? This makes no sense, with due respect. The name should be a code, a nick or anything else that is not related to your identity, as recommended in our instructions. Anyway if you publish or read the forum with your real name, that does not mean anything, you might be a customer or not, and even if you're a customer, that does not say anything about your VPN usage, not even if you connect to a VPN server. Also, you can change your displayed name whenever you wish in "My Settings"->"Display name". Kind regards -
[SOLVED] Port Forwarding and Game Server Hosting
Staff replied to Briland's topic in Troubleshooting and Problems
Hello! Correct, Local Area Connection 2 (10.4.3.194) In your case, our suggestion is ambiguous because you are also inside a 10.247... network. In order to perform a disambiguation, the VPN IP address ranges are the following: https://airvpn.org/specs Kind regards -
[SOLVED] Port Forwarding and Game Server Hosting
Staff replied to Briland's topic in Troubleshooting and Problems
Hello! Please bind the Minecraft server to your VPN IP (when connected, open a command prompt and issue the command "ipconfig"). You can recognize your VPN IP because it starts with 10, it's the IP address of your TAP-Win32 adapter. From AirVPN Port Forwarding panel forward any TCP port . Enter 25565 as local port. Minecraft clients will have to connect to : We are also checking whether it's possible to bind a Minecraft server to an interface (which would be a little bit more comfortable for you), we'll update this thread in case. Kind regards -
[SOLVED] Port Forwarding and Game Server Hosting
Staff replied to Briland's topic in Troubleshooting and Problems
Hello! Since the web server works fine, might it be that the Minecraft server is bound to your computer physical network interface or your internal IPv6 address? Is the Minecraft server configurable so that you can force it to bind to the tun adapter (the network virtual interface used by OpenVPN)? Kind regards